Install Hirey AI on OpenClaw

• Analyzed: May 10, 2026, 6:44 AM
• Findings: 1
• Version: 0.1.54
• Hash: 51c1f8dbe4c0be35ab5878bab0613381ba299bf49a3b9450bf3dcf2af4e5d080
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a complex installer for the Hirey AI platform that performs high-risk operations, including installing external npm packages (@hirey-ai/mcp-server) and modifying the OpenClaw host configuration via the openclaw CLI. The script scripts/openclaw-host-installer.mjs manages the setup of MCP servers, generates authentication tokens, and configures network hooks (defaulting to http://127.0.0.1:18789). While the logic appears aligned with the stated purpose and the SKILL.md includes instructions to seek user approval, the requirement for broad execution and configuration privileges on the host system meets the threshold for a suspicious classification.